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1. (Currently Amended) A computer-implemented process for assessing 
the vulnerability of a workstation to a security compromise, comprising the steps: 

issuing a request for a scanner fhjm a browser operating on the 

workstation to a network server via a computer network; 

transmitting the scanner from the netwoik server to the workstation 
via the computer network, the seamier installable within the browser and operative to 
complete a vulnerabiUty assessment of the workstation to identify security vutaerabibties 
nf tbe workstation that can compromise secure operation of the workstation on the 

computer network; [[and]] 

generating workstation credentials in response to Ihe scanner 

conducting the vulnerabiUty assessment of the workstation; 

P^mpanti fT the worV'^tatmn credc -^tiak tn a workstation policy; 
n..r.t^r^ ^ ar.r.ess to the r ^twnrk server if the workstation credential s 

arp m cnTTinl iance with th e workstation policy; and 

if Hrr.P.ss tn the r^f^^rk server pranted because the workstation 
^Hential. are ^^Tn p1i.nc« with the workstation p olir y issuinp a request for 
credentials a ssociated with a user. 

2. (Original) The computer-implemented process of Claim 1 fiiither 
comprising the step of presenting the workstation credentials to the user of tiie 
workstation. 

3. (Original) The computer-implemented process of Claim 1 further 
comprising the step of transmitting the workstation credentials to the network server via 
the computer network. 

4. (Original) The computer-implemented process of Claim 1 further 
comprising the step of completing a repair operation by the seamier to address a security 
vuhierability identified by the scanner in response to completing the vuhierability 
assessment of the workstation. 
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5. (Original) The computer-implemented process of Claim 1 wherein the 
scanner comprises a plug-in control operable with the browser and a data file defining 
security vulnerabilities. 

6. (Original) The computer-implemented process of Claim 1, wherein the 
step of issuing a request for a scanner comprises the browser issuing a request for a Web 
page at the network server, the Web page hosting the scanner as a plug-in conHol 
available for installation with the browser. 

7. (Original) A computcar-readable medium comprising the computer- 
implemented process of Claim 1. 

8. (Currently Amended) A computer-implemented process for 
authenticating a workstation requesting a software service, comprising the steps: 

issuing a request for a scanner to a network server from a browser 

operating on the workstation; 

transmitting the scanner and a workstation policy from the network 
server to the workstation via the computer network, the scanner mstallable within the 
browser and operative to generate workstation credentials by completing a vuhierability 
assessment of the woricstation; 

comparing the workstation credentials to the workstation policy on 
the workstation to determine whether tiie workstation should be granted access to the 
software sovice; 

granting access to the software s ervice if the workstation 
credentials are in compli ance with the workstation nohcv: and 

if access to the software service is granted becau se the workstation 
credentials are in compliance with the workstat ion ooUcv. issuing a request for user 
authentication . 
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9. (Original) The computer-implemented process of Claim 8, wherein the 
step of issuing a request for a scanner compnses the browser issuing a request for a Web 
page at the network server, the Web page hosting the scanner as a control operable with 
the browser. 

10. (Original) A computer-readable medium comprising the process of 

Claim 8. 

11. (Currently Amended) A computer-implemented process for 
authenticating a workstation requesting a network service from a network server via a 
computer network, comprising the steps: 

issuing a request for a seamier to the network server from a 

browser operating on the workstation; 

transmitting the scanner from the network server to the workstation 
via the computer network, the seamier installable within the browser and operative to 
generate workstation credentials by completing a vuhierabUity assessment of the 
workstation to identify security vuhierabilities that would compromise the secure 
operation of the workstation on the computer network; 

transmitting the woikstation security credentials from the scanner 
to the network server via the computer network; [[and]] 

determining at the network server whether the workstation should 
be granted access to a networic service of the network based on the workstation 
credentialsussi 

pr^nrin p arties5t to tbe network ser v ice if th e workstation 
credentials are in compli ance with the wftrks^ption oolicv: and 

if access is grantt y ^ tn the netw ^^rV service becanse the workstation 
oTftdentials ar« in comi>liaP9e with the w orks ta tion policy , issuinfi a request for 
information relating to user auth entication. 
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12. (Cuirently Amended) The computer-implemented process recited by 
Claim 1 1 wherein the network server comprises a CGI script and the step of determining 
whether the woricstation should be granted access to the network service comprises the 
CGI script comparing the workstation credentials to a workstation security policy 
maintained at the network server to determine whether the woricstation should be granted 

access to the network service; 

if tlio workotation orcdomiala oatigfi' tho workstation gocurity 
lic.liny. than niiThfirii^inr"^-"'" f^r^ntinfr the workstation access to the network service 
[[and]] comprises directing the browser to the log-in page via the computer network[[,]]i 

ntVinmric- rif the workstation cred entials do not match the 
workstation security nolicv. then denying access to the network service and delivering an 
access denied page to the workstation via the computer network. 

13. (Original) A computer-readable medium comprising the computer- 
implemented process of Claim 1 1 . 

14. (Original) The computer-implemented process of Claim 11, wherein 
the step of issuing a request for a scanner comprises the browser issuing a request for a 
Web page at the network server, the Web page hosting the scanner as a plug-in control 
available for installation with the browser. 

15. (Previously Presented) The computer-implemented process of Claim 
1, further comprising receiving credentials associated with a user from tiie browser. 

16. (Previously Presented) The computer-implemented process of Claim 
15, further comprising authenticating the user based on the credentials. 

17. (Previously Presented) The compute-implemented process of Claim 
8, further comprising receiving credentials associated with a user from the browser. 
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18. (Previously Presented) The computer-implemented process of Claim 
17, farther comprising authenticating the user based on the credentials. 

19. (Previously Presented) The computer-implemented process of Claim 
1 1, further comprising receiving credentials associated with a user from the browser. 

20. (Previously Presented) The computer-implemented process of Claim 
19, further comprising authenticating the user based on the credentials. 
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